It’s a warning to anyone who believes their anonymity on such sites is foolproof, especially when the site operator can be the biggest threat. Incognito is entirely drug-oriented, with everything else being prohibitted for sale. Additionally, the market staff imposed a full ban on all opiates and opioids (hydrocodone, oxycodone, heroin, etc), along with all other narcotics that fall under the deliriant class, not just fentenyl like many other darknet markets. The market uses Bitcoin and Monero for transactions, and features multisignature escrow along with direct payments. The market’s staff created the “Incognite foundation”, with the intent “to maximize freedom, welfare, and privacy for all”. The foundation helps fund freedom and privacy-centered organizations like the Tor project and Monero.
One of the most high-profile targets of Operation RapTor—the largest coordinated global crackdown on darknet drug trafficking to date—was Incognito Market, a dark web narcotics marketplace that operated with remarkable scale, anonymity, and apparent impunity. According to TRM Labs, Incognito launched in October 2020 and remained active until March 2024. In that time, it facilitated more than USD 100 million in drug sales, including hundreds of kilograms of cocaine and methamphetamine, alongside heroin, LSD, MDMA, oxycodone, ketamine, and misbranded prescription drugs. Incognito Market was a globally available online narcotics bazaar active through Tor web since October 2020, when it was created by Lin. The marketplace was closed in March 2024 when Rui-Siang Lin, under his online pseudonym “Pharoah” or “Faro,” allegedly committed an exit scam.
Agora Darknet Market
A sketch of a dark-web market’s infrastructure that Lin emailed to himself eight months before allegedly creating Incognito Market, according to the DOJ. Incognito Market says it plans to publish the entire dump of 557,000 orders and 862,000 cryptocurrency transaction IDs at the end of May. In the past 24 hours, the homepage for the Incognito Market was updated to include a blackmail message from its owners, saying they will soon release purchase records of vendors who refuse to pay to keep the records confidential. In a world where digital footprints are often unavoidable, the Incognito Darknet Market stands as a beacon for those who seek to elude the constraints of visibility. It’s a realm where secrets are exchanged, and desires are fulfilled in the uncharted territories of the internet’s underbelly.
As the digital landscape evolves, so does the Incognito Darknet Market. Law enforcement agencies and cybersecurity experts continually adapt their strategies to monitor and regulate the darknet. In this cat-and-mouse game, the marketplace evolves to maintain its promise of anonymity while remaining resilient against potential threats. In the hidden corners of the digital realm, where anonymity reigns supreme, the Incognito Darknet Market emerges as a symbol of the clandestine internet. This enigmatic platform, operating beyond the gaze of conventional search engines, offers users a glimpse into a world where transactions and interactions remain shrouded in secrecy.
Active Darknet Markets
Incognito, like other modern darknet platforms, operated entirely on cryptocurrency—primarily Bitcoin and Monero. Buyers and sellers used wallets controlled either directly or through third-party mixers and exchanges. While Monero obscures transaction details, Bitcoin’s traceable blockchain provided law enforcement with critical leads, particularly at the point of off-ramp—when vendors converted crypto into fiat or moved assets through centralized exchanges. Vendors on Incognito paid a registration fee and a 5% commission on every sale.
This approach mirrored the playbook of earlier darknet markets and contributed to Incognito’s rapid growth. To become an Incognito Market vendor, people were required to register with the site and pay an admission fee. In exchange for listing and selling narcotics as a vendor on Incognito Market, each vendor paid 5% of the purchase price of every narcotic sold. That revenue funded Incognito Market’s operations, including paying “employee” salaries and for computer servers.
The arrest operation at the airport was coordinated and swift, giving Lin little time to react or attempt any digital sabotage (like wiping devices). He was presented in Manhattan federal court two days later to face charges. In the Incognito case, crypto flows revealed how vendors laundered earnings. As DOJ noted, the conspiracy involved laundering darknet proceeds through exchanges and peer-to-peer brokers. TRM has identified structured withdrawals from the market to personal wallets and then to services with less stringent KYC. One particularly revealing moment came in February 2024, when Incognito users reported that BTC withdrawals were disabled—likely part of a deliberate “exit scam.” Lin, or others acting on his behalf, threatened to leak vendor identities to law enforcement unless paid.
Incognito Market Vendors
The mission of the EDTF is to disrupt, dismantle, or render ineffective, organizations involved in the laundering of proceeds of narcotics trafficking and other financial crimes. Since its inception in 1992, the Task Force has been responsible for the seizure of approximately $600 million and more than 2100 arrests. After logging in with a unique username and password, users were able to search thousands of listings for narcotics of their choice. Incognito Market sold illegal narcotics and misbranded prescription medication, including, heroin, cocaine, LSD, MDMA, oxycodone, methamphetamines, ketamine and alprazolam. Users began reporting unexplained delays and failures in withdrawing funds, sparking fears that Incognito’s administrators were perpetrating an “exit scam” – a scenario where the operators disappear with all the money held in escrow. In February 2024, many vendors found they could no longer withdraw their Bitcoin (BTC) earnings from the site, and by early March both BTC and Monero (XMR) withdrawals had ground to a halt.
Thoughts On “Incognito Darknet Market Mass-Extorts Buyers, Sellers”
Incognito has quickly grown to become one of the most trusted and reliable trading platforms on the Darknet, providing users with the confidence to make secure and profitable trades. With our robust security protocols and user-friendly interface, Incognito Onion is the perfect choice for your trading needs. In a LinkedIn post in April 2024, Lin shared some pictures from a “cybercrime and cryptocurrency training” at the Saint Lucia Police Academy. In another post, he promoted his new healthcare project called ‘Face2ID’, which uses contactless biometric scanning to create unique and secure patient identifiers, improving the accuracy and security of patient data management. The St. Lucia government would later issue a press release lauding the success of Lin’s training course, which had been organized by the Taiwanese embassy, where Lin worked as a diplomatic specialist in IT. The statement boasted that 30 officers had learned “nuances of the dark web” and cryptocurrency tracing skills from Lin, who had “used his professional background and qualifications in the field” to teach them how to better combat cybercrime.
- The statutory minimum and maximum sentences are prescribed by Congress and are provided here for informational purposes only, as any sentencing of the defendant will be determined by a judge.
- During those same busy years, Pharoah also launched a web service called Antinalysis, designed to defeat crypto money laundering countermeasures—only for Lin, who prosecutors say controlled that Pharoah persona, to later refashion himself as a crypto-focused law enforcement trainer.
- This allowed US law enforcement to trace cryptocurrency transfers to a digital wallet linked to Lin, leading to his identification and arrest.
- What’s striking is how Lin used this data as a weapon, basically forcing his own users to pay or face legal action.
- Those wishing to trade on Incognito Markets can register by paying a vendor fee of €650 (payable in XMR).
- According to court records and the TRM Labs investigation, the end of Incognito was foreshadowed by chaos.
Darknet Markets Explained
It began by freezing their cryptocurrency funds, so they couldn’t withdraw their money. Then, the scammers threatened to share the private chat details that were supposed to be secret. “Under the promise of anonymity, Lin’s alleged operation offered the purchase of lethal drugs and fraudulent prescription medication on a global scale,” said James Smith, an assistant director in the FBI’s New York office.
Assessing Anonymity Protections On Incognito Marketplace
Additional information about the OCDETF Program can be found at /OCDETF. The public is fed a narrative that Tor is dangerous, a technology for CSAM and terrorism. Many journalists are hesistant to even log in to see what really exists in darknet communities, there’s a perception of too much legal risk.
Only earlier this week did it become clear exactly what Lin’s “professional background and qualifications in the field” allegedly entailed, seemingly unbeknownst to either his Taiwanese employers or his St. Lucian law enforcement trainees. That was before Lin’s alleged theft of his own users’ funds earlier this year and then his arrest last week by the FBI in New York’s JFK airport. Lin was arrested at John F. Kennedy Airport on May 18, and will be presented in Manhattan federal court before U.S. HSI New York leads and directs all operational and administrative activities of the El Dorado Task Force (EDTF). The EDTF is the premier money laundering task force in the nation and is comprised of more than 200 law enforcement personnel representing approximately thirty-five (35) federal, state, and local law enforcement and regulatory agencies. The EDTF encompasses a standalone Cyber Division as part of an effort to stay abreast of emerging criminal threats and in keeping with current and future investigative priorities.
Even if one of his posts suggests an affinity with the current regime, HUMINT recruitment operations are only sometimes straightforward. This hypothesis may sound explainable considering the exit scheme happening in March 2024 with Incognito Marketplace. Therefore, after a month, he began to post images with training provided to some law enforcement agents in order to appear clean on a basic OSINT check or if any traces from Darkweb could lead to him. However, the gambler’s fallacy to conduct an exit scam and extort the loyal members of Incognito may have caused his downfall. On May 18, 2024, Homeland Security Investigations (HSI) New York, in coordination with law enforcement partners, arrested Rui-Siang Lin at John F. Kennedy International Airport in connection with his operation and ownership of Incognito Market.
“Incognito Market” Owner Arrested For Operating One Of The Largest Illegal Narcotics Marketplaces On The Internet
The platform also featured prescription drug listings falsely marketed as authentic, and some products were outright scams—counterfeit pills advertised as legitimate pharmaceuticals. Overall, Incognito is a somewhat clunky but effective darknet marketplace filled with digital goods and scam-related products. Its suppliers tend to be smaller and less reputable, but that doesn’t necessarily mean they’re inferior; just less experienced.
